removed unused config, updated requirements to use ansible-galaxy
This commit is contained in:
parent
bb55714abb
commit
11b9052bee
|
|
@ -1,9 +1,5 @@
|
||||||
---
|
---
|
||||||
|
|
||||||
# main switches
|
|
||||||
configure_anti_ddos: true # mod_evasive
|
|
||||||
configure_security: true # https://www.digitalocean.com/community/tutorials/how-to-set-up-mod_security-with-apache-on-debian-ubuntu
|
|
||||||
|
|
||||||
# default config => is overwritten by provided config
|
# default config => is overwritten by provided config
|
||||||
default_apache:
|
default_apache:
|
||||||
sites: {}
|
sites: {}
|
||||||
|
|
@ -166,37 +162,6 @@ default_site_config:
|
||||||
key_size:
|
key_size:
|
||||||
email:
|
email:
|
||||||
|
|
||||||
default_modules:
|
|
||||||
# <IfModule ${MOD}>
|
|
||||||
# </IfModule>
|
|
||||||
prefork: # see: https://httpd.apache.org/docs/2.4/mod/mpm_common.html
|
|
||||||
ifname: 'prefork.c'
|
|
||||||
settings:
|
|
||||||
StartServers: 5
|
|
||||||
MinSpareServers: 5
|
|
||||||
MaxSpareServers: 10
|
|
||||||
MaxRequestWorkers: 256
|
|
||||||
MaxConnectionsPerChild: 0
|
|
||||||
mod_evasive:
|
|
||||||
ifname: 'mod_evasive20.c'
|
|
||||||
settings:
|
|
||||||
DOSHashTableSize: 4096
|
|
||||||
DOSPageCount: 25
|
|
||||||
DOSSiteCount: 100
|
|
||||||
DOSPageInterval: 1
|
|
||||||
DOSSiteInterval: 1
|
|
||||||
DOSBlockingPeriod: 60
|
|
||||||
DOSLogDir: "{{ CONFIG.log.path }}"
|
|
||||||
# DOSSystemCommand:
|
|
||||||
# DOSEmailNotify: mail@yourdomain.com
|
|
||||||
DOSWhitelist: [
|
|
||||||
'127.0.0.*', '192.168.*.*', '10.*.*.*', '172.16.*.*', '172.17.*.*', '172.18.*.*', '172.19.*.*',
|
|
||||||
'172.20.*.*', '172.21.*.*', '172.22.*.*', '172.23.*.*', '172.24.*.*', '172.25.*.*', '172.26.*.*',
|
|
||||||
'172.27.*.*', '172.28.*.*', '172.29.*.*', '172.30.*.*', '172.31.*.*', '172.32.*.*',
|
|
||||||
]
|
|
||||||
|
|
||||||
APACHE_MODULES: "{{ default_modules | combine(modules, recursive=true) }}"
|
|
||||||
|
|
||||||
apache_config_graylist: [
|
apache_config_graylist: [
|
||||||
'SSLEngine', 'SSLCertificateKeyFile', 'SSLCertificateFile', 'SSLCertificateChainFile', 'ErrorLog', 'CustomLog', 'ServerAdmin',
|
'SSLEngine', 'SSLCertificateKeyFile', 'SSLCertificateFile', 'SSLCertificateChainFile', 'ErrorLog', 'CustomLog', 'ServerAdmin',
|
||||||
'ServerAlias', 'ServerName', 'Redirect'
|
'ServerAlias', 'ServerName', 'Redirect'
|
||||||
|
|
|
||||||
|
|
@ -10,6 +10,4 @@ collections:
|
||||||
source: 'https://galaxy.ansible.com'
|
source: 'https://galaxy.ansible.com'
|
||||||
|
|
||||||
roles:
|
roles:
|
||||||
- src: 'https://github.com/ansibleguy/infra_certs.git'
|
- src: 'ansibleguy.infra_certs'
|
||||||
version: 'stable'
|
|
||||||
name: 'ansibleguy.infra_certs'
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue